JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 54.37.252.59

54.37.252.59 was found in our database!

This IP was reported 151 times. Confidence of Abuse is 49%: ?

49%

ISP	OVH SAS
Usage Type	Data Center/Web Hosting/Transit
ASN	AS16276
Hostname(s)	ns3113365.ip-54-37-252.eu
Domain Name	ovh.net
Country	🇫🇷 France
City	Dunkirk, Hauts-de-France

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 54.37.252.59

Whois 54.37.252.59

IP Abuse Reports for 54.37.252.59:

This IP address has been reported a total of 151 times from 74 distinct sources. 54.37.252.59 was first reported on September 29th 2025, and the most recent report was 1 day ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇩🇪 rh24	2026-06-16 14:19:43 (1 day ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/Fra ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/France/ns3113365.ip-54-37-252.eu) show less	Bad Web Bot
🇬🇷 setupgr	2026-06-15 21:46:02 (2 days ago)	(mod_security) mod_security (id:11000010) triggered by 54.37.252.59: 1 in the last 86400 secs; Ports ... show more (mod_security) mod_security (id:11000010) triggered by 54.37.252.59: 1 in the last 86400 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: [Tue Jun 16 00:45:58.956749 2026] [security2:error] [pid 1917013:tid 1917163] [client 54.37.252.59:54454] ModSecurity: Access denied with code 406 (phase 1). Matched phrase "MJ12bot" at REQUEST_HEADERS:User-Agent. [file "/etc/apache2/conf.d/modsec/modsec2.user.conf"] [line "103"] [id "11000010"] [msg "BLOCKED BOT: MJ12bot - in adoro.gr"] [severity "CRITICAL"] [hostname "adoro.gr"] [uri "/robots.txt"] [unique_id "ajBylkEA9pRZS3vlJ2u6TgAAAIo"] show less	Port Scan
Anonymous	2026-06-12 15:44:50 (5 days ago)	[osotir.org] httpd-noisy-crawler: sites=logosparakliseos.gr; logs=/var/log/httpd/domains/logosparakl ... show more [osotir.org] httpd-noisy-crawler: sites=logosparakliseos.gr; logs=/var/log/httpd/domains/logosparakliseos.gr.log; samples=mj12bot:/robots.txt \| mj12bot:/categories/%CE%B1%CF%86%CE%B9%CE%B5%CF%81%CF%8E%CE%BC%CE%B1%CF%84%CE%B1/ \| mj12bot:/categories/%CE%B1%CF%86%CE%B9%CE%B5%CF%81%CF%8E%CE%BC%CE%B1%CF%84%CE%B1/feed/ show less	Hacking Web App Attack
Anonymous	2026-06-07 06:20:59 (1 week ago)	[osotir.org] httpd-noisy-crawler: sites=megasvasilios.gr; logs=/var/log/httpd/domains/megasvasilios. ... show more [osotir.org] httpd-noisy-crawler: sites=megasvasilios.gr; logs=/var/log/httpd/domains/megasvasilios.gr.log; samples=mj12bot:/tag/%CE%B1%CE%B8%CE%B1%CE%BC%CE%AC%CE%BD%CE%B9%CE%BF/ \| mj12bot:/tag/%CE%B1%CE%B9%CE%BC%CE%BF%CE%B4%CE%BF%CF%83%CE%AF%CE%B1/ \| mj12bot:/tag/%CE%B4%CE%B5%CE%BB%CF%84%CE%AF%CE%BF-%CF%84%CF%8D%CF%80%CE%BF%CF%85/ show less	Hacking Web App Attack
🇺🇸 cwytech	2026-06-03 00:03:05 (2 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
Anonymous	2026-06-02 02:33:21 (2 weeks ago)	PAD: No_Ref detected	Bad Web Bot
🇪🇸 elcruzado.es	2026-05-30 04:34:56 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/Fra ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/France/ns3113365.ip-54-37-252.eu) show less	Bad Web Bot
🇩🇪 rh24	2026-05-28 12:27:53 (2 weeks ago)	(apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/Fra ... show more (apache-useragents) Failed apache-useragents trigger with match [redacted] from 54.37.252.59 (FR/France/ns3113365.ip-54-37-252.eu) show less	Bad Web Bot
🇺🇸 cwytech	2026-05-26 17:42:04 (3 weeks ago)	Fleet-wide ban from the Ghostfleet 👻. Triggered by scenario: cwy/tpot-web-high.	Bad Web Bot Web App Attack
🇫🇷 Phenix Info	2026-05-25 05:37:31 (3 weeks ago)	SmallGuard.fr/Prestashop Bad Bots	Web App Attack
🇩🇪 ghostwarriors	2026-05-24 10:20:12 (3 weeks ago)	Webpage scraping	Brute-Force Bad Web Bot Web App Attack
Anonymous	2026-05-22 17:13:19 (3 weeks ago)	Banned by Fail2Ban on server	Web App Attack
🇫🇷 dusfor72	2026-05-18 10:02:06 (4 weeks ago)	aggressive portscan ...	Port Scan
Anonymous	2026-05-14 22:44:10 (1 month ago)	CRAWLER	Brute-Force
Anonymous	2026-05-14 11:04:55 (1 month ago)	(apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; MJ12bot/v1 ... show more (apache-useragents) Failed apache-useragents trigger with match [Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)] from 54.37.252.59 (FR/France/ns3113365.ip-54-37-252.eu): 5 in the last 300 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 54.37.252.59 - - [14/May/2026:13:03:42 +0200] "GET /robots.txt HTTP/1.1" 200 3004 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 54.37.252.59 - - [14/May/2026:13:03:43 +0200] "GET /checkout/ HTTP/1.1" 200 31441 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 54.37.252.59 - - [14/May/2026:13:04:42 +0200] "GET /robots.txt HTTP/1.1" 200 3004 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 54.37.252.59 - - [14/May/2026:13:04:45 +0200] "GET /robots.txt HTTP/1.1" 200 3003 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" 54.37.252.59 - - [14/May/2026:13:04:44 +0200] "GET /checkout/ HTTP/1.1" 200 31442 "-" "Mozilla/5.0 (compatible; MJ12bot/v1.4.8; http://mj12bot.com/)" show less	Port Scan

Showing 1 to 15 of 151 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇧🇬 79.124.62.230

🇩🇴 190.167.237.191

🇧🇼 168.167.228.74

🇮🇳 163.61.66.2

🇳🇱 91.92.40.28

🇨🇦 85.217.149.14

🇱🇹 81.30.98.62

🇺🇸 66.132.195.70

🇳🇱 45.148.10.152

🇳🇵 36.50.148.92

🇺🇸 23.30.86.197

🇮🇳 4.240.8.92

🇺🇸 154.83.197.88

🇮🇳 124.123.154.49

🇵🇱 87.251.64.158

🇸🇬 47.128.51.117

🇳🇱 45.148.10.151

🇩🇪 45.135.141.19

🇬🇧 35.203.211.132

🇺🇸 216.25.89.143